CrewBind

1. Who We Are

CrewBind (“we”, “us”, or “our”) is a UK-based company operating the CrewBind community management platform at crewbind.com. We are the data controller for personal data collected through the Service. If you have any questions about this policy or how we handle your data, contact us at support@crewbind.com.

2. What Data We Collect

We collect only the data we need to provide and improve the Service:

Information you provide directly

Name and email address: when you join the early access waitlist or create an account.
Marketing preference: whether you consent to receiving product updates and news from us.
Profile information: display name, first and last name, and any other details you choose to add to your account.

Information collected automatically

Usage data: pages visited, features used, and general interaction patterns, used to understand how the product is being used and to improve it.
Technical data: IP address, browser type, device type, and operating system, collected for security, rate limiting, and diagnostic purposes.
Timestamps: account creation date, last active date, and other activity timestamps.

Authentication data

Authentication is handled by Clerk, a third-party identity provider, which manages sign-in and sessions on our behalf. CrewBind doesn’t use passwords: you sign in with Google or with a one-time code sent to your email. If you choose Google, Google shares your name and email address with us. Clerk’s own privacy policy applies to the data they process. You can read it at clerk.com/privacy.

3. Why We Collect It (Legal Bases)

Under UK GDPR, we process personal data on the following legal bases:

Contract performance: to create and manage your account and provide the Service you have signed up for.
Legitimate interests: to improve the product, maintain security, prevent fraud, and understand how users interact with the Service.
Consent: to send you marketing emails and product updates, and to set non-essential cookies. You may withdraw consent at any time.
Legal obligation: where we are required to retain or disclose data by law.

4. How We Use Your Data

To create and administer your account.
To communicate with you about the Service, including sending your invitation when early access opens.
To send product updates and news, where you have given consent.
To diagnose technical issues, monitor Service performance, and improve the product.
To detect and prevent abuse, fraud, or security incidents.
To comply with applicable legal and regulatory obligations.

5. Who We Share Data With

We do not sell your personal data to third parties. We share data only in the following circumstances:

Service providers: trusted third parties who process data on our behalf, including Clerk (authentication), AWS (infrastructure and hosting), and Vercel (website hosting). These providers are bound by data processing agreements and may only use your data to provide services to us.
Legal requirements: if required to do so by law, court order, or governmental authority.
Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you before such a transfer takes effect.

6. Cookies

We use cookies and similar technologies to operate and improve the Service.

Essential cookies

These are necessary for the Service to function and cannot be disabled. They include session cookies used for authentication and security (managed by Clerk).

Analytics cookies

Where you have given consent, we may use analytics cookies to understand how visitors use the Service. These help us identify which features are popular, where users encounter problems, and how we can improve the overall experience. You can withdraw consent at any time by clicking “Manage preferences” in the cookie banner or by contacting us.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Waitlist entries (where no account was created) are retained for up to 24 months from submission. If you request deletion of your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. Backup copies may persist for up to 90 days following deletion.

8. International Transfers

Our primary infrastructure is hosted in the AWS eu-west-2 (London) region. Some of our service providers, including Clerk and Vercel, may process data outside the UK or EEA. Where such transfers occur, we ensure appropriate safeguards are in place, such as UK adequacy regulations or Standard Contractual Clauses.

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may request that we correct inaccurate or incomplete data.
Right to erasure: you may request deletion of your personal data, subject to legal obligations.
Right to restriction: you may ask us to limit how we process your data in certain circumstances.
Right to data portability: you may request your data in a structured, machine-readable format.
Right to object: you may object to processing based on legitimate interests, including for direct marketing.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at support@crewbind.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encryption in transit (TLS), encrypted storage, access controls, and regular security review. However, no system is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes, we will notify you by email or via the Service where reasonably practicable. We encourage you to review this policy periodically.

12. Contact Us

For any questions, requests, or concerns about this Privacy Policy or your personal data, please contact: support@crewbind.com.